does disabling requiretty in sudo have security implications with SSH?

9 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Command disabling sudo access

Hi, I have setup password less login to sudo for a particular group. if I do sudo /usr/local/sbin/group it will take me to the group without password. Recently i executed a command scl_source as source scl_source enable devtoolset-7. After that my sudo is asking password not sure why sudo...

2. IP Networking

Force SSH session without/disabling X11 forwarding.

I would like to disable X11 session forcefully. I have tried the following things: 1. Setting appropriate DISPLAY variable in the /etc/environment file to be "0.0" 2. I have tried setting the sshd_config parameter X11Forwarding to be "no" This session communication is happening by exchanging...

3. Cybersecurity

Help on Ssh using sudo

I'm confused in the configuration of sudoers for one group of users. The users need to execute a app from a remote machine, in this local machine they want me to allow ssh for them using sudo for eg. sudo -u admin ssh -X euadmin@<IP address of remote> <remote script which opens a gui> It...

4. AIX

Disabling SSH direct access for an AIX user

Hello everyone, Can anyone help me please. I want to disable SSH direct access for an AIX user. For example, if I have USER1 and USER2. I want to disactivate direct access for USER2. The user must enter his login (USER1) and his password and then he can do su - USER2 . Thanks,

5. UNIX for Dummies Questions & Answers

Pop the users one by one in sudo cat /etc/security/user

Hi Everyone, When I runthe query in ssh shell sudo cat /etc/security/user , I see half of the users cut down from the display screen. what I want to do is using the somthing like "pop" that when I hit the enter key every time the screen should move to the next user? does some one has any idea how...

6. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

I am writing a BASH script to update a webserver and then restart Apache. It looks basically like this: #!/bin/bash rsync /path/on/local/machine/ foo.com:path/on/remote/machine/ ssh foo.com sudo /etc/init.d/apache2 reloadrsync and ssh don't prompt for a password, because I have DSA encryption...

7. UNIX for Advanced & Expert Users

sudo and ssh

Hi, I would like to know how i can perform a task, while performing ssh, sudo and command at the same time. What I generally do is I ssh to the server, where i created private and public, so it does not prompt me for password all the time. Then i need to run "sudo su - ldaprole" to get into...

8. UNIX for Advanced & Expert Users

sudo and ssh

Hello, Can you config sudo to use the passphrase in the user ssh-key instead of the one in the passwd? Some users do not have local passwords on the system and instead of adding the NOPASSWD in sudoers I would like the solution I asked about above. Thx Jocke

9. Shell Programming and Scripting

Implications of setting sensitive data in ENV

Hello people, In shell scripts if some sensitive data is set into the env so that it is available to other scripts called within those scripts -- Are there are security implications ? -- I believe the scope of those environment variables ends with the execution of the script. -- I see that...

LEARN ABOUT DEBIAN

gksu

GKSU(1) 							   User Commands							   GKSU(1)

NAME

       gksu - GTK+ frontend for su and sudo

SYNOPSIS

       gksu

       gksu [-u <user>] [options] <command>

       gksudo [-u <user>] [options] <command>

DESCRIPTION

       This manual page documents briefly gksu and gksudo

       gksu  is  a frontend to su and gksudo is a frontend to sudo.  Their primary purpose is to run graphical commands that need root without the
       need to run an X terminal emulator and using su directly.

       Notice that all the magic is done by the underlying library, libgksu. Also notice that the library will decide if it should use su or  sudo
       as  backend  using the /apps/gksu/sudo-mode gconf key, if you call the gksu command. You can force the backend by using the gksudo command,
       or by using the --sudo-mode and --su-mode options.

       If no command is given, the gksu program will display a small window that allows you to type in a command to be run,  and  to  select  what
       user the program should be run as. The other options are disregarded, right now, in this mode.

OPTIONS

       --debug, -d

	      Print information on the screen that might be useful for diagnosing and/or solving problems.

       --user <user>, -u <user>

	      Call <command> as the specified user.

       --disable-grab, -g

	      Disable the "locking" of the keyboard, mouse, and focus done by the program when asking for password.

       --prompt, -P

	      Ask the user if they want to have their keyboard and mouse grabbed before doing so.

       --preserve-env, -k

	      Preserve the current environments, does not set $HOME nor $PATH, for example.

       --login, -l

	      Make  this  a login shell. Beware this may cause problems with the Xauthority magic. Run xhost to allow the target user to open win-
	      dows on your display!

       --description <description|file>, -D <description|file>

	      Provide a descriptive name for the command to be used in the default message, making it nicer.  You can also  provide  the  absolute
	      path for a .desktop file. The Name key for will be used in this case.

       --message <message>, -m <message>

	      Replace  the  standard message shown to ask for password for the argument passed to the option.  Only use this if --description does
	      not suffice.

       --print-pass, -p

	      Ask gksu to print the password to stdout, just like ssh-askpass. Useful to use in scripts with programs that  accept  receiving  the
	      password on stdin.

       --su-mode, -w

	      Force gksu to use su(1) as its backend for running the programs.

       --sudo-mode, -S

	      Force gksu to use sudo(1) as its backend for running the programs.

SEE ALSO

       su(1), sudo(1)

gksu version 2.0.x						    August 2006 							   GKSU(1)

UNIX for Dummies Questions & Answers